Struct AllowlistWebPermissions 

pub struct AllowlistWebPermissions(/* private fields */);

Available on crate feature web only.

Permissions manager for the web related extensions

Allows only operations that are explicitly enabled

Uses interior mutability to allow changing the permissions at runtime

Implementations

impl AllowlistWebPermissions

pub fn new() -> Self

Create a new instance with nothing allowed by default

pub fn set_hrtime(&self, value: bool)

Set the hrtime permission

If true, timers will be allowed to use high resolution time

pub fn set_exec(&self, value: bool)

Set the exec permission

If true, FFI execution will be allowed

pub fn set_read_all(&self, value: bool)

Set the read_all permission

If false all reads will be denied

pub fn set_write_all(&self, value: bool)

Set the write_all permission

If false all writes will be denied

pub fn allow_open(&self, path: &str, read: bool, write: bool)

Whitelist a path for opening

If read is true, the path will be allowed to be opened for reading
If write is true, the path will be allowed to be opened for writing

pub fn allow_url(&self, url: &str)

Whitelist a URL

pub fn deny_url(&self, url: &str)

Blacklist a URL

pub fn allow_read(&self, path: &str)

Whitelist a path for reading

pub fn deny_read(&self, path: &str)

Blacklist a path for reading

pub fn allow_write(&self, path: &str)

Whitelist a path for writing

pub fn deny_write(&self, path: &str)

Blacklist a path for writing

pub fn allow_host(&self, host: &str)

Whitelist a host

pub fn deny_host(&self, host: &str)

Blacklist a host

pub fn allow_vsock(&self, cid: u32, port: u32)

Whitelist a virtual socket

pub fn deny_vsock(&self, cid: u32, port: u32)

Blacklist a virtual socket

pub fn allow_env(&self, var: &str)

Whitelist an environment variable

pub fn deny_env(&self, var: &str)

Blacklist an environment variable

pub fn allow_sys(&self, kind: SystemsPermissionKind)

Whitelist a system operation

pub fn deny_sys(&self, kind: SystemsPermissionKind)

Blacklist a system operation

Trait Implementations

impl Clone for AllowlistWebPermissions

fn clone(&self) -> AllowlistWebPermissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AllowlistWebPermissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AllowlistWebPermissions

fn default() -> AllowlistWebPermissions

Returns the “default value” for a type.

impl WebPermissions for AllowlistWebPermissions

fn allow_hrtime(&self) -> bool

Check if hrtime is allowed

fn check_host( &self, host: &str, port: Option<u16>, api_name: &str, ) -> Result<(), PermissionCheckError>

Check if a host is allowed to be connected to by net

fn check_vsock( &self, cid: u32, port: u32, api_name: &str, ) -> Result<(), PermissionCheckError>

Check if a virtual socket is allowed to be connected to by net

fn check_url( &self, url: &Url, api_name: &str, ) -> Result<(), PermissionCheckError>

Check if a URL is allowed to be used by fetch or websocket

fn check_read<'a>( &self, p: Cow<'a, Path>, api_name: Option<&str>, ) -> Result<Cow<'a, Path>, PermissionCheckError>

Check if a path is allowed to be read by fetch or net

fn check_write<'a>( &self, p: Cow<'a, Path>, api_name: Option<&str>, ) -> Result<Cow<'a, Path>, PermissionCheckError>

Check if a path is allowed to be written to by net

fn check_open<'a>( &self, resolved: bool, read: bool, write: bool, path: Cow<'a, Path>, api_name: &str, ) -> Option<Cow<'a, Path>>

Check if a path is allowed to be opened by fs

fn check_read_all( &self, api_name: Option<&str>, ) -> Result<(), PermissionCheckError>

Check if all paths are allowed to be read by fs

fn check_read_blind( &self, p: &Path, display: &str, api_name: &str, ) -> Result<(), PermissionCheckError>

Check if a path is allowed to be read by fs

fn check_write_all(&self, api_name: &str) -> Result<(), PermissionCheckError>

Check if all paths are allowed to be written to by fs

fn check_write_blind( &self, path: &Path, display: &str, api_name: &str, ) -> Result<(), PermissionCheckError>

Check if a path is allowed to be written to by fs

fn check_write_partial<'a>( &self, path: Cow<'a, Path>, api_name: &str, ) -> Result<Cow<'a, Path>, PermissionCheckError>

Check if a path is allowed to be written to by fs

fn check_sys( &self, kind: SystemsPermissionKind, api_name: &str, ) -> Result<(), PermissionCheckError>

Check if a system operation is allowed

fn check_env(&self, var: &str) -> Result<(), PermissionCheckError>

Check if an environment variable is allowed to be accessed

fn check_exec(&self) -> Result<(), PermissionCheckError>

Check if FFI execution is allowed